RH
Product
Red Hat JBoss Data Grid 7
by Red Hat · last CVE Dec 3, 2025
10
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 4Low 0
Watch

Add Red Hat JBoss Data Grid 7 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-3884
7.5
1%
Dec 3
Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded
Affected: All versions, or not specified
CVE-2024-7885
7.5
3%
Aug 21
Undertow: improper state management in proxy protocol parsing causes information leakage
Affected: All versions, or not specified
CVE-2024-5971
7.5
3%
Jul 8
Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket
Affected: All versions, or not specified
CVE-2024-6162
7.5
2%
Jun 20
Undertow: url-encoded request path information can be broken on ajp-listener
Affected: All versions, or not specified
CVE-2024-1635
7.5
5%
Feb 19
Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol
Affected: All versions, or not specified
CVE-2023-4639
7.4
1%
Nov 17
Undertow: cookie smuggling/spoofing
Affected: All versions, or not specified
CVE-2024-1102
6.5
1%
Apr 25
Jberet: jberet-core logging database credentials
Affected: All versions, or not specified
CVE-2023-6717
6.0
1%
Apr 25
Keycloak: xss via assertion consumer service url in saml post-binding flow
Affected: All versions, or not specified
CVE-2024-8447
5.9
1%
Jan 2
Narayana: deadlock via multiple join requests sent to lra coordinator
Affected: All versions, or not specified
CVE-2024-3653
5.3
2%
Jul 8
Undertow: learningpushhandler can lead to remote memory dos attacks
Affected: All versions, or not specified
Showing 10